derek.holloway
7502bf64a4
CodeQL / Analyze (actions) (push) Canceled after 0s
CodeQL / Analyze (python) (push) Canceled after 0s
pre-commit / pre-commit (push) Canceled after 0s
Multi-Arch CI / setup (push) Canceled after 0s
Publish build_manylinux_x86_64 images / publish_build_manylinux_x86_64 (push) Canceled after 0s
Setup (Multi-Arch) / setup (push) Canceled after 0s
Multi-Arch CI / Linux::${{ fromJSON(needs.setup.outputs.linux_build_config || '{}').build_variant_label || 'skip' }} (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Publish no_rocm_image_ubi10 image / publish_no_rocm_image_ubi10 (push) Canceled after 0s
Multi-Arch CI / Windows::${{ fromJSON(needs.setup.outputs.windows_build_config || '{}').build_variant_label || 'skip' }} (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Multi-Arch CI / Manifest Diff (push) Canceled after 0s
TheRock Manifest Diff Report / Generate Manifest Diff Report (push) Canceled after 0s
Multi-Arch CI / CI Summary (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04 (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04_ocl_rt images / publish_no_rocm_image_ubuntu24_04_ocl_rt (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_rocgdb (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04_rocgdb images / publish_no_rocm_image_ubuntu24_04_rocgdb (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_ocl_rt (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Unit Tests / Unit Tests :: ubuntu-24.04 (push) Canceled after 0s
Unit Tests / Unit Tests :: windows-2022 (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_media (push) Canceled after 0s
Unit Tests / Unit Tests Summary (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_openmpi (push) Canceled after 0s
74 lines
3.6 KiB
C
74 lines
3.6 KiB
C
// RUN: %clang_analyze_cc1 -analyzer-checker=core,security.SetgidSetuidOrder -analyzer-output=text -verify %s
|
|
|
|
typedef int uid_t;
|
|
typedef int gid_t;
|
|
|
|
int setuid(uid_t);
|
|
int setgid(gid_t);
|
|
|
|
uid_t getuid();
|
|
gid_t getgid();
|
|
|
|
|
|
|
|
void test_note_1() {
|
|
if (setuid(getuid()) == -1) // expected-note{{Assuming the condition is false}} \
|
|
// expected-note{{Taking false branch}}
|
|
return;
|
|
if (setuid(getuid()) == -1) // expected-note{{Call to 'setuid' found here that removes superuser privileges}} \
|
|
// expected-note{{Assuming the condition is false}} \
|
|
// expected-note{{Taking false branch}}
|
|
return;
|
|
if (setgid(getgid()) == -1) // expected-warning{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}} \
|
|
// expected-note{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}}
|
|
return;
|
|
}
|
|
|
|
void test_note_2() {
|
|
if (setuid(getuid()) == -1) // expected-note{{Call to 'setuid' found here that removes superuser privileges}} \
|
|
// expected-note 2 {{Assuming the condition is false}} \
|
|
// expected-note 2 {{Taking false branch}}
|
|
return;
|
|
if (setgid(getgid()) == -1) // expected-warning{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}} \
|
|
// expected-note{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}} \
|
|
// expected-note{{Assuming the condition is false}} \
|
|
// expected-note{{Taking false branch}}
|
|
return;
|
|
if (setuid(getuid()) == -1) // expected-note{{Call to 'setuid' found here that removes superuser privileges}} \
|
|
// expected-note{{Assuming the condition is false}} \
|
|
// expected-note{{Taking false branch}}
|
|
return;
|
|
if (setgid(getgid()) == -1) // expected-warning{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}} \
|
|
// expected-note{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}}
|
|
return;
|
|
}
|
|
|
|
int f_setuid() {
|
|
return setuid(getuid()); // expected-note{{Call to 'setuid' found here that removes superuser privileges}}
|
|
}
|
|
|
|
int f_setgid() {
|
|
return setgid(getgid()); // expected-warning{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}} \
|
|
// expected-note{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}}
|
|
}
|
|
|
|
void test_note_3() {
|
|
if (f_setuid() == -1) // expected-note{{Assuming the condition is false}} \
|
|
// expected-note{{Calling 'f_setuid'}} \
|
|
// expected-note{{Returning from 'f_setuid'}} \
|
|
// expected-note{{Taking false branch}}
|
|
return;
|
|
if (f_setgid() == -1) // expected-note{{Calling 'f_setgid'}}
|
|
return;
|
|
}
|
|
|
|
void test_note_4() {
|
|
if (setuid(getuid()) == 0) { // expected-note{{Assuming the condition is true}} \
|
|
// expected-note{{Call to 'setuid' found here that removes superuser privileges}} \
|
|
// expected-note{{Taking true branch}}
|
|
if (setgid(getgid()) == 0) { // expected-warning{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}} \
|
|
// expected-note{{A 'setgid(getgid())' call following a 'setuid(getuid())' call is likely to fail}}
|
|
}
|
|
}
|
|
}
|